Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D80ABAE0B0F811E595E0F761C4F9AE02.roa
File:                     D80ABAE0B0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier:          gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=
Subject key identifier:   7C:67:FE:27:5F:D1:CA:CE:E6:DD:86:14:86:6F:E8:9C:6D:B5:DA:0C
Certificate issuer:       /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial:       35A9
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D80ABAE0B0F811E595E0F761C4F9AE02.roa
Signing time:             Sat 04 Apr 2026 15:10:11 +0000
ROA not before:           Sat 04 Apr 2026 15:10:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38186
IP address blocks:        27.50.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
                          rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13737 (0x35a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
        Validity
            Not Before: Apr  4 15:10:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d129d2-7198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:b6:f1:b5:73:3b:0c:7b:22:3b:5b:92:47:
                    f6:e7:58:a3:d2:dc:53:f7:63:ab:7a:e8:6c:c5:31:
                    8a:1f:87:19:8e:79:86:52:4c:bd:ee:33:0b:bc:29:
                    27:d5:c6:f2:b5:5e:0d:19:47:70:a2:d8:f7:ff:f3:
                    7c:5b:89:c1:45:2c:bf:4a:3a:6c:91:9a:10:b6:de:
                    4a:f8:b6:97:12:1c:68:59:02:eb:8c:59:65:0b:99:
                    ff:4d:18:fb:93:a1:d6:12:e8:97:99:ab:c9:85:2f:
                    fe:52:1d:f0:ce:22:9e:bc:34:c8:25:f6:b3:3c:61:
                    ac:20:54:6e:4b:ba:6a:c5:3e:70:95:cc:eb:fe:fe:
                    f8:e3:e2:d8:60:b3:f8:0d:7d:99:33:a7:35:f9:c6:
                    d4:7e:50:c4:7e:f5:6f:30:65:4a:c0:4d:ae:32:58:
                    4c:63:e9:59:fc:c8:ef:2d:06:ca:a4:69:eb:c6:d0:
                    01:55:0e:9d:de:7c:d3:bd:74:45:71:ee:7c:13:b4:
                    04:ee:ac:12:20:4c:78:39:1a:d1:9d:19:97:ed:02:
                    94:24:7b:ca:10:ac:9e:17:5e:29:1c:9a:97:a3:d6:
                    7a:a6:5e:f2:af:ab:00:27:21:37:00:2f:80:17:00:
                    d5:43:97:19:6a:e9:9c:19:0b:a9:21:25:49:29:c4:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:67:FE:27:5F:D1:CA:CE:E6:DD:86:14:86:6F:E8:9C:6D:B5:DA:0C
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D80ABAE0B0F811E595E0F761C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:66:15:c6:7e:c7:0b:42:15:4d:14:10:dc:37:02:b7:b7:b9:
         d1:11:6c:a1:e0:ff:6a:aa:11:3e:84:87:5f:4b:8d:2c:99:9c:
         8a:18:17:e1:2a:73:e6:6e:c8:16:db:04:f5:21:f8:25:8d:be:
         24:03:c8:29:35:07:94:37:c1:c9:d4:7d:ed:5a:66:60:de:8a:
         a2:10:eb:3b:c7:9f:d7:79:69:28:44:e7:f6:19:8e:fa:e8:7d:
         90:11:43:01:ae:b7:73:04:8f:8c:87:a0:6d:15:9b:7e:0e:81:
         bb:b5:ab:2c:65:03:da:3c:e3:62:fe:fd:eb:43:9e:c8:f5:95:
         be:62:12:c5:c3:48:16:e1:90:e9:2c:eb:48:05:7f:06:a0:bc:
         70:2c:7c:e2:91:25:9c:46:46:cf:24:77:85:02:e5:4b:f5:88:
         8f:e8:fc:3b:d2:c0:37:8c:e0:2e:d7:91:5b:a8:c4:0d:03:68:
         e9:19:ee:c9:3d:81:cc:a7:e0:7b:6d:ce:b1:d8:cb:ce:37:66:
         a0:5e:9b:1e:76:d2:b5:0b:1f:bf:3d:be:fa:3d:f1:70:a5:f5:
         b6:71:e1:fd:5d:d6:38:aa:be:c7:51:f4:40:ed:ba:52:eb:6c:
         25:ac:d2:70:d9:ec:c4:d5:a2:97:bf:bf:7f:b5:62:7c:b9:e9:
         41:cf:3d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:05 2026 by rpki-client